Behavioral task
behavioral1
Sample
f6a660f73891fe44104b36180ad8eb4e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6a660f73891fe44104b36180ad8eb4e_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f6a660f73891fe44104b36180ad8eb4e_JaffaCakes118
-
Size
16KB
-
MD5
f6a660f73891fe44104b36180ad8eb4e
-
SHA1
d1d5ca94ed90620ecdfe19915919659cdafbe8f0
-
SHA256
6048f46d105fbd932674f43f28a9f00d201c0ac27293b47fafa42669d0637844
-
SHA512
c0f2b4de61ad8ebd64d0d6fee8a5ae7edb10f289db12941ccb20385a720e17a253394619c39d22a29105267f483d821d90b143f0482eeb3f50416ab9a753f90a
-
SSDEEP
384:AMP0BG0eiyAikmg9bdWdBcKjizEQYyZRGvfRMjop4PhFD1/gpucOjXX:LP0Bfei3ygLKqfRGXRsopcqNOjn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6a660f73891fe44104b36180ad8eb4e_JaffaCakes118
Files
-
f6a660f73891fe44104b36180ad8eb4e_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE